1 /**
2 * Copyright (C) 2021 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 // This PoC is written taking reference from frameworks/base/native/graphics/jni/imagedecoder.cpp
18
19 #include <android/imagedecoder.h>
20 #include <binder/IPCThreadState.h>
21 #include <vector>
22 #include "../includes/common.h"
23
24 constexpr int32_t kMaxDimension = 5000;
25
26 struct DecoderDeleter {
operator ()DecoderDeleter27 void operator()(AImageDecoder *decoder) const { AImageDecoder_delete(decoder); }
28 };
29
30 using DecoderPointer = std::unique_ptr<AImageDecoder, DecoderDeleter>;
31
makeDecoder(const uint8_t * data,size_t size)32 DecoderPointer makeDecoder(const uint8_t *data, size_t size) {
33 AImageDecoder *decoder = nullptr;
34 int result = AImageDecoder_createFromBuffer(data, size, &decoder);
35 if (result != ANDROID_IMAGE_DECODER_SUCCESS) {
36 return nullptr;
37 }
38 return DecoderPointer(decoder);
39 }
40
main(int argc,char ** argv)41 int main(int argc, char **argv) {
42 FAIL_CHECK(argc >= 2);
43 android::ProcessState::self()->startThreadPool();
44 char *filename = argv[1];
45 FILE *file = fopen(filename, "r");
46 FAIL_CHECK(file);
47 fseek(file, 0, SEEK_END);
48 size_t size = ftell(file);
49 fseek(file, 0, SEEK_SET);
50 std::vector<uint8_t> buffer(size);
51 fread((void *)buffer.data(), 1, size, file);
52 fclose(file);
53 DecoderPointer decoder = makeDecoder(buffer.data(), size);
54 FAIL_CHECK(decoder);
55 const AImageDecoderHeaderInfo *info = AImageDecoder_getHeaderInfo(decoder.get());
56 int32_t width = AImageDecoderHeaderInfo_getWidth(info);
57 int32_t height = AImageDecoderHeaderInfo_getHeight(info);
58 FAIL_CHECK(width <= kMaxDimension && height <= kMaxDimension);
59 size_t stride = AImageDecoder_getMinimumStride(decoder.get());
60 size_t pixelSize = height * stride;
61 std::vector<uint8_t> pixels(pixelSize);
62 time_t test_started = start_timer();
63 while (timer_active(test_started)) {
64 int32_t result = AImageDecoder_decodeImage(decoder.get(), pixels.data(), stride, pixelSize);
65 if (result != ANDROID_IMAGE_DECODER_SUCCESS) {
66 break;
67 }
68 }
69 return EXIT_SUCCESS;
70 }
71